Internet Storm Center

Job Description

The Cyber Security Network Analyst will report metrics and data to management and teams in providing value toward business goals and strategies. Research, investigate, and present information on Network threats and Vulnerabilities while providing expertise of industry best practices. Design and Implement Network Segmentation concepts and Network Architecture Design. Maintenance and configure Intrusion Detection System/Intrusion Prevention System (IDS/IPS), VPN, Firewalls, and Proxy. Participate in penetration testing, Architecture Design, Operational Technology Network Design, alerting, monitoring, and/or forensic resolutions.

Description of duties and responsibilities:

Develop/Deliver reporting of metrics and data to management and teams that provide value toward business goals and strategies.
Drive/Deliver research and/or investigate background information of threats, vulnerabilities, and/or application tooling.
Drive/Deliver resolution of IT/Cyber Security report tickets.
Design, guide, and recommend secure network architecture for enterprise solutions and Operational Technology.
Drive/Deliver Macro and Micro Network Segmentation throughout MSA including managing segmentation firewalls.
Partner in efforts to maintain MSA VPN (Employee and Vendor).
Drive/Deliver web filtering proxy for MSA.
Provide Cyber Security Expertise of Industry Best Practices to Teams and Management.
Drive/Deliver Network Penetration Testing and Network Threat Analysis.
Manages and tunes IDS/IPS systems (Network and Host)
Follow MSA Standard Operating Procedures and internal quality measures in completing work.
Provide support to internal and external auditors and execute remediation plans when audit issues and concerns are raised.
Design, document and continually enhance security administration policies, processes, and procedures.

Special knowledge, skills, and abilities required:

Demonstrated ability to communicate professionally and effectively in written and oral format.
Drafts clear, concise and accurate technical reports or documents of a basic nature.
Demonstrated ability to troubleshoot and resolve complex networking / operating system security issues.
Demonstrated ability to work independently, with guidance in only the most complex situations.
Experience configuring proactive alert notifications and monitoring techniques in Firewalls and/or IDS/IPS.
Experience in utilizing threat intelligence sources.
Experience in configuring System Firewalls
Experience in tuning IDS/IPS.
Understand and addresses security issues and collaborates to resolve the problem, overcome the obstacle, or improve the process.
Has developing knowledge of security authorization and architecture across the various landscapes.
Possess an understanding of Incident Response fundamentals.
Produce high-quality work results.
Responds to customer needs by providing accurate and timely solutions to problems presented.
5% or less requirement of international travel

Preferred:

4+ years of cyber security experience
Strong Cyber Security technical background
Experience performing network analysis, host forensic analysis, malware analysis, static/dynamic analysis of captured files, root cause of cyber security events considered a plus.

Education and experience required:

Senior: 3 years minimum of cyber security experience
Advanced: 5 years minimum of cyber security experience

Preferred:

Bachelor’s Degree in Information Science, Computer Science or related discipline
GDSA: GIAC Defensible Security Architect Certification, GSEC, or similar industry certification

#LI-EE1